Browser icon with blue background.
Browser icon with blue background.

Understanding the Schools and Libraries Cybersecurity Pilot Program

The FCC Pilot Program will allow the use of school and library funds to offset the cost of eligible cybersecurity services and equipment.
Browser icon with blue background.
6 min read

Schools and libraries often lack the funding and staffing needed to build and maintain a robust cybersecurity program. They are also the exact kind of organizations threat actors prefer— under defended and a storehouse of personally identifiable information (PII). Considering that, in 2024, education was the second-most represented industry in ransomware attacks, and third-most in business email compromise (BEC) attacks, it’s clear that protection is paramount.

The E-Rate program, administered by the Universal Service Administrative Company (USAC) under the direction of the FCC, has long helped schools, school districts, and libraries apply for federal funding to help maintain internet access and build digital infrastructure. However, the program has historically lacked funding for cybersecurity, making it difficult for these resource-strapped organizations to stay secure as they move toward digital operations.

The Schools and Libraries Cybersecurity Pilot Program, greenlit in mid 2024, is hoping to change that. Administered by the same government organizations, this opportunity will allow the use of eligible schools and libraries funds to offset the cost of eligible cybersecurity services and equipment.

The FCC has just announced that the filing window will open on Sept. 17, 2024, and close Nov. 1, 2024. The application is available through the E-Rate website. According to the notice, “Prospective applicants interested in participating in the Pilot Program must file Part 1 of the FCC Form 484, to provide basic information about their cybersecurity needs, experience, and plans to use the cybersecurity funding if selected to participate in the Pilot.”

To learn more about this program, Arctic Wolf spoke to our Director of Government Contracts PJ Byrd, and Product Marketing Manager Britt Serra to break down what organizations need to know and how they can prepare for the application process.

Want more information on the pilot program? View our webinar, Exploring the $200M FCC E-Rate Cybersecurity Pilot Program.

How does this pilot program differ from previous E-Rate programs?
PJ Byrd: It’s not E-Rate, but it follows some of the E-Rate procedures. This was an attempt to determine need, and after the three-year pilot USAC will determine if it will be included in the E-Rate program. Cybersecurity has never been in E-Rate previously.

How does this pilot program align (or not) with how people have used E-Rate in the past?
PJ Byrd: E-Rate, previously, has been more around internet and connectivity into classrooms and libraries. It’s more about network equipment. This is very different. There has been a need and E-Rate hasn’t been able to fulfil that need for schools.

Why should an organization apply for this FCC Pilot Program?
Britt Serra: Because we want to demonstrate the need for cybersecurity for schools and libraries.
PJ Byrd: There’s a huge need for this, and that need has been going on for years. It’s gotten heightened visibility in recent years with the increase in breaches and incidents within K-12 school districts. I saw on a USAC webinar, there is some speculation that there’s only going be 20,000 recipients all applying for $200 million USD. The pilot program is intended to show the FCC there’s a huge need.
Those who won’t be able to be a part of the pilot program are having to sacrifice by waiting for three years. We hope the overwhelming volume of applicants opens the FCC’s eyes to the need of even more funding opportunities.

What solutions are eligible under this program?
PJ Byrd: There are four categories – monitoring, detection, and response; endpoint protection; identity protection and authentication; and advanced or next- generation firewalls. That covers two of our solutions, Arctic Wolf® Managed Detection and Response and Arctic Wolf® Managed Risk.

How does Arctic Wolf map to the program? Where can we help when it comes to the application and implementation process?
Britt Serra: Both Arctic Wolf Managed Detection and Response and Arctic Wolf Managed Risk qualify under this program. While we can’t help organizations fill out the application, we can help them answer questions that Arctic Wolf would be included in. Meaning, we can help you understand the value and benefit that Arctic Wolf provides so you can take that into consideration as you’re filling out the application. We want to be the subject matter experts for organizations, and we’re going to be with you as the process unfolds.

How much funding is available through this program?
PJ Byrd: There are budget maximums for this program. For schools, it’s $13.60 annually per student, and for libraries it’s $45,000 per site, up to 11 sites.

What should schools and libraries do to prepare for the application process?
PJ Byrd: They should be appointing someone to work on this and looking at their security posture. Take stake of where you have gaps in your approach and what eligible solutions would bolster your posture. Be sure to sign up for USAC trainings and look into registration requirements before the application window opens. Be prepared, lead with Arctic Wolf, and have a good plan.

Learn more about how Arctic Wolf can help transform your school’s cybersecurity.
Want to start evaluating your cybersecurity posture in advance of the application? Arctic Wolf Cyber JumpStart is free to use and offers both resources and a cyber risk assessment for your school or library.

 

Share this post: